$ rpki-client -vvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft File: gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json) Hash identifier: LUG7CjbY4Q01P+TGqp7yqfu219H8DV+6yNH2FOeicSE= Subject key identifier: 79:81:17:45:CD:49:3D:3F:9C:96:8C:EB:5B:D0:E3:F8:9E:73:15:7F Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 Certificate issuer: /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft Manifest number: 0601 Signing time: Thu 24 Apr 2025 22:40:47 +0000 Manifest this update: Thu 24 Apr 2025 22:40:47 +0000 Manifest next update: Thu 01 May 2025 22:40:47 +0000 Files and hashes: 1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: +cHY3DuM6gSfm3W89KZ9k7xWfbWk29ZMyp5BNHl11fM=) 2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: IMdjByBIYJm1pushgtHVRf7baWnF2aGGxcZRsZb6Kqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569 Validity Not Before: Apr 24 22:40:47 2025 GMT Not After : May 1 22:40:47 2025 GMT Subject: CN=680abdef-8268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:73:95:45:df:38:a1:c5:94:19:9b:fd:54:2c: f1:d1:a6:c1:2b:81:1c:23:85:43:4f:f2:c6:79:cf: 76:02:63:ae:fe:65:f7:84:89:3d:88:9f:c3:ea:d9: 5b:bc:ae:e9:55:ff:5d:a2:24:d9:50:ee:68:0d:b9: de:2c:7a:90:8a:82:63:89:11:5a:e0:90:d6:1c:16: 1e:81:46:7b:dd:63:e6:46:35:8d:97:c1:3c:d9:e5: 47:58:37:d0:fe:f7:b9:0f:ec:24:5c:13:d0:64:88: cd:15:75:c3:ef:df:df:7c:4c:cc:17:8c:da:95:44: 88:a7:06:16:2b:94:99:86:7c:4c:c7:c2:07:cb:c2: 6a:6b:de:65:68:12:97:f7:d3:b6:59:26:b0:75:fb: 25:27:02:0c:2e:30:d1:7a:35:64:3b:71:0e:d8:1b: 62:b8:3b:6c:4f:05:06:16:da:19:16:1b:b4:d7:9d: 4d:53:ef:f5:d8:35:6e:1e:ea:67:99:11:99:ba:1a: 4b:25:75:fc:ed:0a:97:0d:9b:9c:ae:20:7d:32:9d: 90:fb:62:5a:6a:04:37:4e:bc:83:a9:40:57:b3:5d: 3c:b8:19:07:3d:10:2b:ce:3f:aa:d0:64:ee:d4:f2: 2a:bc:51:b8:bf:15:8b:07:63:fa:9d:70:e4:55:c1: 01:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:81:17:45:CD:49:3D:3F:9C:96:8C:EB:5B:D0:E3:F8:9E:73:15:7F X509v3 Authority Key Identifier: keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ff:ae:0b:6b:d2:1a:d6:7b:fa:97:99:09:bc:37:d1:95:41: 47:d8:84:57:52:36:83:bf:de:6c:0c:88:c1:cb:29:6d:d4:ab: 42:06:d8:aa:46:f1:23:22:cc:17:e1:e2:87:88:45:be:69:b3: f6:fb:9d:51:57:71:bc:04:d5:85:0f:b6:63:0d:f1:14:a0:f3: 04:fb:5c:9f:15:a1:51:36:e0:b4:0f:de:38:4f:97:68:8d:74: 2d:54:ba:6a:05:7c:75:38:25:00:2f:09:dc:6a:cc:12:97:f5: 83:03:9f:b1:86:7c:0e:56:45:64:6c:0b:a7:0d:26:6a:6b:bc: f2:7d:ec:c6:93:4d:06:38:fe:a0:31:3a:e5:5d:83:ad:29:d3: 2b:99:bf:69:09:4b:54:f9:82:c8:a0:da:03:f2:8d:0b:3d:39: 5c:b1:14:81:49:a2:fc:b0:5c:a0:9b:52:1d:36:27:ae:be:33: b8:38:4e:60:da:79:9d:fd:e4:c3:45:2c:69:46:42:98:4c:12: ef:4d:83:51:9e:e7:af:eb:10:19:10:0d:ff:f5:7e:c9:d7:bd: 32:f8:49:9f:b4:26:2c:ef:b3:7d:16:57:1a:0f:bd:61:f1:01: 8e:b6:6f:52:38:48:80:07:f2:b8:6c:89:09:39:25:13:92:2c: b3:fe:66:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMjgxMTAvBgNVBAUTKDgwOUVGRjFGNzgxOUI4MTc1MUYxNzdBQjVBRkVEODJC Q0MzMkE1NjkwHhcNMjUwNDI0MjI0MDQ3WhcNMjUwNTAxMjI0MDQ3WjAYMRYwFAYD VQQDEw02ODBhYmRlZi04MjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlHOVRd84ocWUGZv9VCzx0abBK4EcI4VDT/LGec92AmOu/mX3hIk9iJ/D6tlb vK7pVf9doiTZUO5oDbneLHqQioJjiRFa4JDWHBYegUZ73WPmRjWNl8E82eVHWDfQ /ve5D+wkXBPQZIjNFXXD79/ffEzMF4zalUSIpwYWK5SZhnxMx8IHy8Jqa95laBKX 99O2WSawdfslJwIMLjDRejVkO3EO2BtiuDtsTwUGFtoZFhu0151NU+/12DVuHupn mRGZuhpLJXX87QqXDZucriB9Mp2Q+2JaagQ3TryDqUBXs108uBkHPRArzj+q0GTu 1PIqvFG4vxWLB2P6nXDkVcEBqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmBF0XN ST0/nJaM61vQ4/iecxV/MB8GA1UdIwQYMBaAFICe/x94GbgXUfF3q1r+2CvMMqVp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAyOC84QTRBREVFNEEx MUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVCZFI4WGVyV3Y3WUs4d3lw V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKN19IM2dadUJkUjhYZXJXdjdZSzh3eXBXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAyOC84QTRBREVFNEExMUYxMUVCOTMzOUQ1MEFDNEY5QUUwMi9nSjdfSDNnWnVC ZFI4WGVyV3Y3WUs4d3lwV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd/64La9Ia1nv6l5kJvDfRlUFH2IRXUjaDv95sDIjByylt1KtCBtiq RvEjIswX4eKHiEW+abP2+51RV3G8BNWFD7ZjDfEUoPME+1yfFaFRNuC0D944T5do jXQtVLpqBXx1OCUALwncaswSl/WDA5+xhnwOVkVkbAunDSZqa7zyfezGk00GOP6g MTrlXYOtKdMrmb9pCUtU+YLIoNoD8o0LPTlcsRSBSaL8sFygm1IdNieuvjO4OE5g 2nmd/eTDRSxpRkKYTBLvTYNRnuev6xAZEA3/9X7J170y+EmftCYs77N9FlcaD71h 8QGOtm9SOEiAB/K4bIkJOSUTkiyz/mbo -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:51 2025 by rpki-client